Listen to this Post
The CVE-2025-63681 vulnerability in open-webui v0.6.33 stems from incorrect access control in the /api/tasks/stop/ API endpoint. This endpoint is designed to cancel LLM response tasks but fails to verify whether the requesting user owns the task being targeted. As a result, an authenticated user—even with normal privileges—can send a request to this endpoint with the ID of any task, including those initiated by other users. The system processes the request without checking ownership, leading to unauthorized cancellation. This flaw allows attackers to disrupt arbitrary LLM response tasks, potentially interrupting workflows or causing denial-of-service conditions. The vulnerability is rooted in missing authorization checks before performing the stop action, a common access control oversight. It exploits the trust that the API places in the authenticated session without validating task-user associations. Attackers can leverage this by crafting simple HTTP requests, as no additional permissions are required. The impact is limited to stopping tasks but can affect system reliability and user experience. The issue is specific to the task management functionality within open-webui. No workaround is mentioned, and a patch is expected to address the ownership verification. The vulnerability was published in NVD on December 4, 2025, with details highlighting the direct access flaw. It underscores the importance of implementing proper access controls in multi-user AI interfaces. The API’s lack of validation makes it easy to exploit with minimal effort. This can lead to targeted attacks against specific users’ tasks. The vulnerability is classified as Incorrect Access Control under CWE definitions. It affects versions up to v0.6.33, pending updates. Developers must ensure user context is validated for all task operations. The exploit requires network access to the open-webui instance. Proper logging and monitoring can help detect such unauthorized attempts.
Platform: open-webui
Version: v0.6.33
Vulnerability: Incorrect Access Control
Severity: Not specified
date: 12/04/2025
Prediction: Patch date unknown
What Undercode Say:
Analytics: Showing bash commands and codes related to the blog .
curl -X POST http://target.com/api/tasks/stop/ -H “Content-Type: application/json” -d ‘{“task_id”:”12345″}’ -H “Authorization: Bearer
Check task IDs via /api/tasks/ list endpoint.
Monitor API logs for unauthorized stop requests.
how Exploit:
Send POST request to /api/tasks/stop/ with another user’s task ID using authenticated session. No ownership check allows cancellation.
Protection from this CVE
Implement user ownership verification before task cancellation. Update to patched version when available. Use role-based access controls.
Impact:
Unauthorized task cancellation disrupting LLM responses. Potential denial-of-service for users. Compromised task integrity.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
